Authorization Bypass in PHPGurukul Bank Locker Management System

Executive Summary

This vulnerability is an authorization bypass in PHPGurukul Bank Locker Management System 1.0. It exists in the file /blms/view-assign-locker.php where the ltid parameter can be manipulated to bypass authentication. The exploit allows unauthorized access to sensitive customer data.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, check if the file /blms/view-assign-locker.php is accessible without authentication. Test by accessing the URL with a manipulated ltid parameter, such as appending ?ltid=1 to the path. If sensitive data is returned without login, the system is vulnerable.

Useful 0 Not Useful 0

Impact Analysis

An attacker could remotely access sensitive customer information including names, emails, phone numbers, addresses, and identity documents. This could lead to identity theft, social engineering attacks, or physical targeting of bank locker holders.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability likely violates GDPR due to unauthorized access to personal data and HIPAA if medical-related data was exposed. It results in non-compliance with data protection requirements for handling sensitive customer information.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately restrict access to /blms/view-assign-locker.php by implementing session authentication checks. Remove or secure directories containing scanned documents and photographs. Replace sequential ltid with non-sequential identifiers to prevent enumeration. Ensure proper authorization is enforced for all sensitive data access.

Useful 0 Not Useful 0